Senior Software Engineer I

Description

The company runs a technology platform for life and annuity growth, building enterprise software and data tools that help people buy, sell and manage insurance products.

It manages over $180 billion in assets under administration and serves more than 100 carrier clients, 2,500 distributors and partners, and over 2 million policyholders.

The role sits on the Enterprise API & CIAM team, which runs the customer identity and access management platform for carriers, distributors, agents, policyholders and service integrations across the company Live, Market Connect and the TPA services.

You would extend this production platform with new identity flows and an evolved authorization model, and help product teams integrate securely, working with the CIAM tech lead, product managers and security and compliance partners in a regulated insurance setting.

Responsibilities

• Build and evolve login flows: workforce SSO federation over SAML or OIDC, passwordless login for agents and consumers, and machine-to-machine access for service integrations.
• Design fine-grained authorization that mixes role, attribute and relationship-based access control (RBAC, ABAC, ReBAC) to limit access by carrier, product, distributor, hierarchy and delegation.
• Build automated provisioning so access stays accurate when users are onboarded, moved between roles, granted delegated access or offboarded.
• Design, document and maintain the CIAM APIs used by other company teams.
• Work with product teams to bring new applications onto the CIAM integration pattern.
• Own the quality and uptime of your work through automated tests, code review, observability and on-call shifts.
• Partner with security and compliance teams to put access controls in place, support audits, and make sure every access decision is logged and can be explained.

Requirements

• Senior Software Engineer role on the Enterprise API & CIAM team.
• At least 6 years of professional software development experience, including building and running production cloud services; AWS experience preferred.
• Hands-on work with OAuth 2.0, OpenID Connect and SAML, including federation with external identity providers.
• Experience with a CIAM platform such as Auth0 (preferred), Okta or PingOne.
• Experience designing authorization beyond basic roles, such as attribute-based or relationship-based models.
• Strong backend skills in TypeScript/Node.js or a comparable language, with solid grounding in API design, testing and software design.
• Working knowledge of CI/CD, infrastructure as code, containers, and monitoring and alerting.
• Clear written and verbal communication, and the ability to work across a distributed team of engineers, product managers and security partners.
• Experience working in an Agile or Scrum environment.
• Bonus: experience with OpenFGA, Auth0 FGA or other Zanzibar-style authorization systems.
• Bonus: experience with event-driven architectures (Kafka/Confluent), API gateways (Kong), MongoDB, Terraform or Datadog.
• Bonus: background in insurance, financial services or another regulated industry, especially agent and distributor hierarchies, licensing and appointments, or delegated access.

Conditions

Equal opportunity employer; applicants are considered without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status or disability.

Benefits

• Career progression and competitive compensation.
• Health and dental insurance, parental leave, 401(k), incentive or bonus opportunity, and tuition reimbursement, among others.
• Work alongside smart, creative colleagues building new technology, data insights and services for the insurance industry.